kraken26at[.]com

The domain kraken26at.com poses an elevated risk of brand impersonation, specifically targeting the cryptocurrency exchange Kraken. This domain has been taken offline, but it remains a potential threat due to its previous activities and the high number of detections by security vendors.

Analysis indicates that kraken26at.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on March 28, 2026. The domain resolves to the IP address 95.85.236.107, which is located in Germany and hosted by MHost LLC. It is flagged by 14 out of 95 security vendors on VirusTotal, indicating a concerning level of suspicious activity. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy, further suggesting its malicious intent. Notably, the domain lacks an SSL certificate, which is often a red flag for security-conscious users.

To mitigate the risks associated with brand impersonation attacks, users and organizations should implement the following steps: First, educate employees and users about the importance of verifying the authenticity of websites and emails, especially those purporting to be from trusted financial institutions like Kraken. Second, deploy advanced email filtering and web protection tools to block access to known malicious domains and URLs. Finally, monitor for any attempts to resurrect this domain and similar ones, and report any suspicious activity to the relevant authorities and the targeted brand to help prevent further spread of the threat.